Endpoint Security

Anyone used the API to list polices and found data missing?I am querying all policies (https://api.apjc.amp.cisco.com/v1/policies) and I get 13 policies and they are all the default policies that are there to begin with.  I'm not getting any of the p...

Hi, Can someone help me understand the effect of implementing metric in the address family ipv4 rather than in a specific interface.Please see below config for reference. router isis 123is-type level-2-onlynet xx.xxxx.xxxx.xxxx.xxxx.xxnsf ietflog adj...

Hello, our company is using Cisco Firepower 2110 for 3 different locations. (Let's say location A, B, C.) A - Center of infra, Firepower 2110 using.  --- Global authorityB - Firepower 2110 using.                --- Global authorityC - Firepower 2110 ...

For AMP to run a scheduled scan, does the user account that AMP uses need to have admin rights? 

Hi All, We are facing replication issue in our environment we have 8 nodes in our deployment 2 Admin 2 Monitoring and 2 PSN and running dot1x , BYOD and posture services. On primary node we are getting Replication issue for all other nodes and when w...

Error Code 3240361993Description Exploit Prevention failed to start and is not working as expected. Please contact support I see this error on several machines in my environment after update to 7.3.13.20165.How do I we correct this issue, so that my ...

I'm not sure if this is the right place to ask. I have an old EXE file, which has been incorrectly flagged as malware by both Cisco and Windows Defender. I have contacted Microsoft support, they confirmed that it was a false positive. Therefore, they...

Hi Team, One of our customers had a malware attack on the critical servers hence in the process of a endpoint AMP PoV. The connectivity for these servers to Cisco cloud has been provided as per the documentation of FireAMP. But still getting an erro...

In our VMware Horizon 8.1 environment with Windows 10 20H2 linked clones we are implementing AMP for Endpoints.The installation with the Identity Persistence (setup.exe /R /S /goldenimage 1) works fine. Also the Ubuntu Local AMP update server works w...

Thanks for attending our March ATXs session! Here’s the post-session resources for easy reference. New to ATXs? An ATXs session, offered at no cost, is an hour of real-time learning led by Cisco experts, who will answer your technology questions thro...

Good morning. When I do an API call looking for any info about specific IPs, for groups, using this URI:https://api.amp.cisco.com/v1/computers?internal_ip=10.0.0.1&internal_ip=10.0.0.2&internal_ip=10.0.0.3&internal_ip=10.0.0.4&internal_ip=10.0.0.5&in...

Hi Everyone.   I'm trying to write a guide for our analysts on how to perform threat validation when receiving Malicious Activity Detection alerts. I have a filter set up in AMP that emails the groups when certain events are observed. Specifically we...